Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by IAPP
Exam Format
150 min
90
300
Professional
Registration
$550 USD
Pearson VUE or online proctoring
English, Chinese
Validity
2 years
Earn 20 Continuing Privacy Education (CPE) credits per 2-year term; Pay Certification Maintenance Fee (CMF) of $250 USD per term; IAPP members have CMF included in membership benefits
CIPP-CN Exam Topics and Domains
CIPP-CN is organized into 3 weighted domains. Expect to work with Compliance monitoring, Consent management platforms, Enforcement tracking, Privacy policies, and more.
1
Introduction to Personal Information Protection in China
33%
Overview of Chinese Privacy Regulatory Framework
Evolution of Chinese Privacy LawsScope and Application of Privacy Laws
- Understand the structure and hierarchy of Chinese privacy laws
- Identify which organizations and activities fall under regulatory scope
- Recognize the roles of different regulatory authorities
Fundamental Privacy Principles
Core Processing PrinciplesLegal Bases for Processing
- Apply fundamental privacy principles to data processing activities
- Determine appropriate legal bases for different processing scenarios
- Understand the hierarchy and priority of privacy principles
Cybersecurity Law (CSL) Foundations
Network Security ObligationsCritical Information Infrastructure (CII) Protection
- Understand CSL network security requirements and MLPS framework
- Identify CII operators and their enhanced obligations
- Apply incident response and security assessment requirements
Data Security Law (DSL) Foundations
Data Classification and GradingData Security Management
- Classify data according to DSL requirements
- Implement data security management systems
- Understand risk assessment and governance obligations
2
The Personal Information Protection Law (PIPL)
34%
Personal Information Processing Requirements
Personal Information Definitions and ScopeConsent RequirementsNotice and Transparency Obligations
- Identify personal and sensitive personal information under PIPL
- Implement valid consent mechanisms for various processing scenarios
- Draft and maintain compliant privacy notices
Individual Rights Under PIPL
Core Individual RightsRights Implementation and Exceptions
- Understand the scope and application of individual rights under PIPL
- Establish compliant processes for handling rights requests
- Apply exceptions and limitations appropriately
Cross-Border Data Transfers
Transfer Requirements and MechanismsCAC Security AssessmentStandard Contractual Clauses and CertificationTransfer Exemptions
- Navigate the three compliance mechanisms for cross-border transfers
- Conduct transfer impact assessments
- Determine when CAC security assessment is required
- Apply transfer exemptions appropriately
Compliance and Accountability
Personal Information Protection Impact Assessments (PIAs)Data Protection Officers and GovernanceData Breach NotificationEnforcement and Penalties
- Implement PIPL accountability requirements including PIAs and DPOs
- Establish breach notification procedures compliant with PIPL
- Understand enforcement mechanisms and penalty frameworks
3
Sectoral Regulations and Compliance
33%
Workplace and Employment Privacy
Employee Personal Information ProcessingWorkplace Monitoring and Surveillance
- Apply PIPL to employment relationships and HR processing
- Implement compliant workplace monitoring practices
- Balance employer needs with employee privacy rights
Sensitive Data Categories and Special Protections
Health and Genetic DataBiometric and Facial Recognition
- Understand enhanced protections for sensitive data categories
- Apply specific requirements for health, genetic, and biometric data
- Comply with sectoral regulations for special data types
AI, Algorithms, and Automated Processing
Algorithmic Governance FrameworkGenerative AI and Responsible AI UseAutomated Decision-Making Rights
- Navigate CAC algorithmic governance requirements
- Comply with generative AI regulations
- Implement individual rights for automated decision-making
Sector-Specific Compliance
Financial Services PrivacyTelecommunications and Internet ServicesChildren's Privacy ProtectionsNetwork Data Security Management Regulations
- Apply sector-specific privacy requirements in key industries
- Understand children's privacy protections and parental consent
- Navigate the 2025 Network Data Security Management Regulations
- Implement industry-specific compliance frameworks
Emerging Issues and Recent Developments
2026 CSL AmendmentsEnforcement Trends and Case StudiesInternational Data Governance Alignment
- Stay current with recent amendments and regulatory developments
- Analyze enforcement trends and apply lessons to compliance programs
- Compare Chinese privacy framework with international standards
How do I earn this certification?
Passing CIPP-CN earns the CIPP/CN certification. It sits in the CIPP (Certified Information Privacy Professional) track.
Current Level Exams
- CIPP/E - Certified Information Privacy Professional - EuropeGDPR and European privacy law focus
- CIPP/US - Certified Information Privacy Professional - United StatesU.S. federal and state privacy law focus
- CIPP/C - Certified Information Privacy Professional - CanadaCanadian privacy law including PIPEDA
- CIPP/A - Certified Information Privacy Professional - AsiaBroader Asia-Pacific privacy laws and frameworks
Next Level Options
- CIPM - Certified Information Privacy ManagerPrivacy program management and operations expertise
- CIPT - Certified Information Privacy TechnologistTechnical privacy implementation and privacy by design
- AIGP - Artificial Intelligence Governance ProfessionalParticularly relevant given China's AI regulations • AI governance and responsible AI practices
- FIP - Fellow of Information PrivacyHighest IAPP credential - requires CIPP + (CIPM or CIPT or AIGP) + work experience
Alternative Paths
- CDPSE - Certified Data Privacy Solutions EngineerComplementary technical privacy certification from different vendor
- CIPM - Certified in the Governance of Enterprise ITBroader IT governance expertise complementing privacy knowledge
- CISSP - Certified Information Systems Security Professional Security expertise to complement privacy knowledge
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for CIPP-CN is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2024-10-01
- Announcement date: 2024-09-01
Updates
- Generative AI Services Domain III coverage of AI governance and algorithmic transparency • Release date: 2023-08-15
- Facial Recognition and Biometric Systems Domain III sensitive data categories and consent requirements
- Cloud Services and Data Localization Domain I CII obligations and Domain II cross-border transfers
Who should take this exam?
This exam is typically taken by Privacy professionals working with Chinese organizations and Data protection officers in multinational companies.
- Understanding of basic privacy and data protection concepts
- Familiarity with Chinese business environment
- Experience with data governance or compliance roles